An Act respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts

Sponsor

Status

In committee (House), as of Oct. 3, 2025

Subscribe to a feed (what's a feed?) of speeches and votes in the House related to Bill C-8.

Summary

This is from the published bill. The Library of Parliament has also written a full legislative summary of the bill.

Part 1 amends the Telecommunications Act to add the promotion of the security of the Canadian telecommunications system as an objective of the Canadian telecommunications policy and to authorize the Governor in Council and the Minister of Industry to direct telecommunications service providers to do anything, or refrain from doing anything, that is necessary to secure the Canadian telecommunications system. It also establishes an administrative monetary penalty scheme to promote compliance with orders and regulations made by the Governor in Council and the Minister of Industry to secure the Canadian telecommunications system as well as rules for judicial review of those orders and regulations.
Part 2 enacts the Critical Cyber Systems Protection Act to provide a framework for the protection of the critical cyber systems of services and systems that are vital to national security or public safety and that are delivered or operated as part of a work, undertaking or business that is within the legislative authority of Parliament. It also, among other things,
(a) authorizes the Governor in Council to designate any service or system as a vital service or vital system;
(b) authorizes the Governor in Council to establish classes of operators in respect of a vital service or vital system;
(c) requires designated operators to, among other things, establish and implement cyber security programs, mitigate supply-chain and third-party risks, report cyber security incidents and comply with cyber security directions;
(d) provides for the exchange of information between relevant parties; and
(e) authorizes the enforcement of the obligations under the Act and imposes consequences for non-compliance.
This Part also makes consequential amendments to certain Acts.

Elsewhere

All sorts of information on this bill is available at LEGISinfo, an excellent resource from Parliament. You can also read the full text of the bill.

Bill numbers are reused for different bills each new session. Perhaps you were looking for one of these other C-8s:

C-8 (2021) Law Economic and Fiscal Update Implementation Act, 2021
C-8 (2020) Law An Act to amend the Citizenship Act (Truth and Reconciliation Commission of Canada's call to action number 94)
C-8 (2020) An Act to amend the Criminal Code (conversion therapy)
C-8 (2016) Law Appropriation Act No. 5, 2015-16

Debate Summary

line drawing of robot

This is a computer-generated summary of the speeches below. Usually it’s accurate, but every now and then it’ll contain inaccuracies or total fabrications.

Bill C-8 aims to protect Canadian critical infrastructure by amending the Telecommunications Act and establishing cybersecurity measures for federally regulated sectors, including finance, energy, and transportation.

Liberal

  • Addresses rising cyber threats: The party asserts Bill C-8 is essential to urgently enhance Canada's preparedness and resilience against expanding, complex, and malicious cyber threats targeting critical infrastructure.
  • Introduces new legal framework: The bill amends the Telecommunications Act for security as a policy objective and enacts the Critical Cyber Systems Protection Act, compelling operators to protect systems and report incidents.
  • Improves privacy and accountability: Bill C-8 strengthens privacy protections for Canadians, increases government transparency and accountability, and includes a reasonableness standard for issuing orders, addressing stakeholder concerns.

Conservative

  • Supports cybersecurity, seeks amendments: The Conservative party supports the principle of strengthening Canada's critical cyber systems and intends to vote for the bill at second reading, but will scrutinize it closely and propose amendments at committee.
  • Protects privacy and charter rights: Conservatives seek to ensure the bill does not infringe on Canadians' privacy and Charter rights, citing concerns about sweeping ministerial powers, secret orders, and the potential to cut off individual services without due process.
  • Addresses flawed scope and oversight: The party criticizes the bill's narrow scope, which excludes vital institutions like hospitals and schools, and demands stronger oversight, transparency, accountability mechanisms, and fair cost-sharing for national security measures.
  • Criticizes government's delays: Conservatives criticize the Liberal government's repeated delays and past incompetence in advancing cybersecurity legislation, which has left Canada vulnerable and lagging behind its international allies.

NDP

  • Supports strengthening cybersecurity: The NDP acknowledges the necessity of Bill C-8 to strengthen critical infrastructure against cyber-threats but emphasizes the need for a balanced approach that protects rights.
  • Criticizes sweeping ministerial powers: The party is concerned about the bill granting sweeping powers to the Minister of Industry and cabinet without prior judicial approval, parliamentary review, or independent oversight.
  • Raises privacy and civil liberty risks: Concerns include mandatory information sharing with vague standards, lack of privacy impact assessments, and no guarantees against data repurposing, potentially jeopardizing GDPR adequacy.
  • Calls for worker protection and fairness: The NDP highlights the absence of compensation for companies, support for workers, and calls penalties extreme, urging safeguards for fairness and due process, especially for frontline employees.

Bloc

  • Supports bill C-8: The Bloc Québécois supports the bill's objective to protect critical sectors from cyber-attacks, but stresses the need for significant amendments to address various concerns.
  • Protects Quebec's jurisdiction: The party strongly opposes federal intrusion into Quebec's jurisdiction over electricity, particularly concerning Hydro-Québec's existing robust cybersecurity systems and adherence to North American standards.
  • Ensures privacy and transparency: The Bloc demands amendments to ensure greater government accountability, enhance transparency through reporting requirements, and strengthen privacy protections against broad information collection powers.
Was this summary helpful and accurate?

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:40 a.m.

Conservative

Matt Strauss Conservative Kitchener South—Hespeler, ON

Mr. Speaker, my learned friend from Haldimand—Norfolk's speech was terrific. She is a very tough act to follow.

When I read the bill for the first time, my jaw hit the floor. As I have previously discussed in the House, my motivation for signing up to become a politician was the violation of basic charter rights that the Liberals perpetrated in the last Parliament. Even with that background in mind, I had thought and hoped that they had perhaps been chastened and that they would not try so hard to claim unto themselves, in the current Parliament, powers explicitly forbidden by our Constitution, but I was wrong.

Before I start talking about the bill today, let me just say that it has been shocking to listen to Liberals claim to defend charter rights, when they themselves violated section 2 and section 8 of our charter when they imposed the Emergencies Act. That was determined by Justice Mosley of the federal court. All the Liberal members in the last Parliament voted to do that, and I do not want to hear any more about defending charter rights from any such member who has not apologized for that violation.

As for the present bill, I am concerned by the following clauses. Clause 15.1 and clause 15.2 would give the minister the unprecedented, incredible power to kick any private Canadian citizen off the Internet, to cut off their phone line and to turn off their cell phone. That is the plain-language summary but I will quote now the bill in its legalese:

If there are reasonable grounds to believe that it is necessary to do so to secure the Canadian telecommunications system against any threat...the Minister may...

prohibit a telecommunications service provider from providing any service to [the] specified person.

Perhaps this might make sense to do in an extreme circumstance, if a person is trying to cause our satellites to crash or to jam military radar, but the clause does not use language about extreme threats of physical damage or threats to national security. It says “any threat”.

As far as I can tell, given the Liberals' incautious and bombastic use of terms like “misinformation”, that being any information they do not like, or “existential threat”, for instance when the hon. member for Burlington North—Milton West called the leader of my party an “existential threat to our democracy”, which is, of course, bananas, it seems to me that the industry minister could deem any speech they do not like “any threat”, and then kick that person off the Internet. The clause reaches Chinese Communist Party levels of government overreach, and the Liberals should be ashamed of themselves.

The bill gets worse; it does not get better. Subclause 15.2(5) would give the minister the ability to make secret the decision to kick someone off the Internet. Imagine that: Someone has annoyed the Liberal Party overlords, and the Liberal Party overlords have decided to kick the person off the Internet and cut their phone line. This person cannot tell anyone that they have been cut off. I have no idea how this could even possibly be enforced, but imagine being put, effectively, into a digital gulag, unable to use the phone, the Internet or one's online banking, and if the person tells anyone that this happened, they could go to physical jail.

I do not doubt that the Liberals will stand and say that I am being somehow outlandish in my interpretation of this. I am not; it is there in black and white. Let me quote it for them. It seems as though they have not read it: “An order made under subsection (1) or (2) may also include a provision prohibiting the disclosure of its existence, or some or all of its contents, by any person.” If members are not inclined to believe me, they can Google “Bill C-8” and “Canadian Constitution Foundation”. There they will find its publication from October 1, 2025, where its expert lawyers corroborate my concerns.

I am sorry to say that the bill continues to get worse; it does not get better. Clause 15.4 says, “The Minister may require any person to provide...within any time...any information that [would help her make a decision] under section 15.‍1 or 15.‍2”.

It seems to me that if the legislation passes in its current, unamended form, the Minister of Industry could wake up one morning and decide that any of us or any other private citizen may be, possibly, as she is not quite sure, some sort of threat to our telecommunications system. With no warrant, no trial and no automatic judicial review, she could compel Rogers or Telus to give her that citizen's address book, their Internet search history or their browser history.

This is unreasonable, and it is shocking. This is the Liberal Party under its new Prime Minister. Meet the new boss, same as the old boss. In my first speech to the House, I beseeched the new Prime Minister to discard this darkness and turn toward the light. By reintroducing the Trudeau legislation, he has failed to make the turn.

It is not just me raising these concerns. The Liberals tried to ram the bill through the last Parliament. Multiple civil society groups wrote an open letter to former minister Marco Mendicino, alerting him to the problems. Signatories to the letter include the Canadian Civil Liberties Association, the Canadian Constitution Foundation, the International Civil Liberties Monitoring Group, Ligue des droits et libertés, OpenMedia and the Privacy and Access Council of Canada.

Here is a quote from a summary of that letter: “Bill C-26 grants the government sweeping new powers not only over vast swathes of the Canadian economy, but also to intrude on the private lives of Canadians.”

Here is another quote: “Time and again, we’ve seen federal governments try to grant themselves the power to intrude on our private lives in the name of ‘security’ — and time and again, people in Canada have come together to push back.”

The summary of the letter also says that the bill “lacks guardrails to constrain abuse”, “permits unknowable orders to trump public regulation”, “authorizes the use of secret evidence in Court”, “grants power without accountability” and “lacks justification”; that is, the bill would not even fix the cybersecurity problems it purports to solve.

Do the Liberals believe that creeping authoritarianism worldwide and on this continent is a problem, or do they not? If they do, why have they written a bill with such authoritarian provisions? Why have they failed entirely to take the advice of these civil liberties groups?

Once again, the bill will go to committee. Once again, Conservatives will be called upon to do the Liberals' homework and repair the deeply flawed bill. The offending provisions that I have described would not make us any safer. The industry minister's turning off a private Canadian citizen's cellphone would do nothing to stop hackers in Russia, China and Iran from wreaking havoc on our telecommunications infrastructure. The Liberals cannot fix the problem, because they do not understand the problem. They do not even understand where the problem is coming from. In the relatively uncommon situation where the threat is indeed coming from a private Canadian citizen in his mother's basement, why would they cut off his Rogers account? We can get a warrant, arrest him, have a trial in open court and put him in jail.

It is the Conservatives who care about and understand cybersecurity. People with even a passing familiarity of the day's news will recall that Conservatives called to ban Huawei from our 5G networks for three years before the members on the opposite side deigned to take that threat seriously.

We will salvage what is good out of the bill, and we are happy to do that work for the good of Canadians, but this cleanup job should not be necessary. If the Liberals would merely live up to their apparently insincere reverence for our charter rights, we would not even need to have this conversation.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:50 a.m.

Winnipeg North Manitoba

Liberal

Kevin Lamoureux LiberalParliamentary Secretary to the Leader of the Government in the House of Commons

Mr. Speaker, it is always interesting to hear Conservatives make extreme, outlandish claims. The member opposite tries to say that the Liberal Party is going to take away the Internet, take away cellphones and deny people the opportunity to do their banking. The Conservatives have come up with a whole conspiracy theory on how big government is going to take everything away, when the legislation is all about protecting Canadians and protecting the economy.

Does the member see any merit in having cybersecurity legislation that would ensure that the interests of Canadians are being served? This includes our economy and economic transactions that take place every day by the thousands. Does he not see the merit in protecting that?

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:50 a.m.

Conservative

Matt Strauss Conservative Kitchener South—Hespeler, ON

Mr. Speaker, I wish this were a conspiracy. I wish the Liberals had the shame to keep it secret. It is open and it is in the bill. Multiple civil society groups have written letters asking them to change this. They are sounding the alarm.

The member said I think it is a conspiracy that the Liberals might freeze bank accounts. They already did that; the federal court said it was a violation of charter rights, and they have no response to that. I am asking them to apologize. They should stand up; they have a lot to say. Now would be a terrific time to apologize for violating our charter rights in the last Parliament.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:50 a.m.

An hon member

Oh, oh!

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:50 a.m.

Conservative

Matt Strauss Conservative Kitchener South—Hespeler, ON

I am serious. I do not know why you are laughing.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:50 a.m.

The Deputy Speaker Tom Kmiec

I will just remind members to speak through the Chair.

Questions and comments, the hon. member for Kamloops—Thompson—Nicola.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:50 a.m.

Conservative

Frank Caputo Conservative Kamloops—Thompson—Nicola, BC

Mr. Speaker, it is always a pleasure to rise on behalf of the people of Kamloops—Thompson—Nicola.

These are the types of things that bring us to the House. On the one hand, we recognize there is an issue. Cybersecurity is of concern to all Canadians. We do lag behind our Five Eyes allies in this regard. On the other hand, we have to balance that with civil rights, the charter, which sometimes the Liberals want to talk about, except when they are alienating charter rights from people as often happens.

Can my hon. colleague speak about that balance: the need to address a problem and to do so while also respecting rights?

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:50 a.m.

Conservative

Matt Strauss Conservative Kitchener South—Hespeler, ON

Mr. Speaker, my learned colleague is a lawyer. He understands the balance. His whole work has been in the tension in this balance, and I respect very much what he has to say about it.

It is a centuries-old problem, the tension between rights and security, and we have centuries-old solutions to the problem. We have solutions like warrants, judicial review, open trial, open evidence and the right to a lawyer. The bill would preclude all of that. We do not have to reinvent the wheel; we need to build back into the bill the long-standing, charter-upheld guarantees of our liberty. There is nothing novel about that.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:50 a.m.

Thérèse-De Blainville Québec

Liberal

Madeleine Chenette LiberalParliamentary Secretary to the Minister of Canadian Identity and Culture and Minister responsible for Official Languages and to the Secretary of State (Sport)

Mr. Speaker, in a world where Canadians, such as the people of Thérèse-De Blainville, believe that our Canadian institutions are robust and that the Canadian Charter of Rights and Freedoms is protected, the question is whether we need to do more to protect ourselves against cyberthreats.

Is my colleague willing to work with the government to find the best solution to protect Canadians from cyberthreats? The charter is fully protected by our laws.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:50 a.m.

Conservative

Matt Strauss Conservative Kitchener South—Hespeler, ON

Mr. Speaker, yes, Conservatives will work day and night to fix the bill to improve our cybersecurity, in the committee, in every committee and in the chamber. We are committed to improving cybersecurity. We are committed to not violating charter rights.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:55 a.m.

Conservative

Ziad Aboultaif Conservative Edmonton Manning, AB

Mr. Speaker, obviously the government likes more control over Canadians through Bill C-8. Can the hon. member, through his wonderful and detailed speech, explain to us where the government wants overreach and more control over Canadians?

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:55 a.m.

Conservative

Matt Strauss Conservative Kitchener South—Hespeler, ON

Mr. Speaker, it has unfortunately been a theme with the current government. It is not just Bill C-8; it is also Bill C-9. It is also Bill C-5 in certain respects. With every problem the Liberals come across, they think the solution is to give themselves more power. They think that if they were to run the telecommunications system, it would be safer. They have been running the Post Office for the last 10 years. They have been running the passport office. I do not see any evidence that putting them in charge of things, like our telecommunications system, makes anyone any safer.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:55 a.m.

The Deputy Speaker Tom Kmiec

Is the House ready for the question?

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:55 a.m.

Some hon. members

Question.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:55 a.m.

The Deputy Speaker Tom Kmiec

The question is on the motion.

If a member participating in person wishes that the motion be carried or carried on division, or if a member of a recognized party participating in person wishes to request a recorded division, I would invite them to rise and indicate it to the Chair.